CVE ID:	CVE-2014-0189
Description:	virt-who uses world-readable permissions for /etc/sysconfig/virt-who, which allows local users to obtain password for hypervisors by reading the file.
Test IDs:	1.3.6.1.4.1.25623.1.0.871332   1.3.6.1.4.1.25623.1.0.868997
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-0189 67089 http://www.securityfocus.com/bid/67089 RHSA-2015:0430 http://rhn.redhat.com/errata/RHSA-2015-0430.html [oss-security] 20140428 CVE-2014-0189: /etc/sysconfig/virt-who is world-readable (contains unencrypted passwords) http://www.openwall.com/lists/oss-security/2014/04/28/2 https://bugzilla.redhat.com/show_bug.cgi?id=1081286 https://bugzilla.redhat.com/show_bug.cgi?id=1081286 https://bugzilla.redhat.com/show_bug.cgi?id=1088732 https://bugzilla.redhat.com/show_bug.cgi?id=1088732